# Source: php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619 | Prophet Security

Prophet Security: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · vendor · secondary · captured

# php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619 | Prophet Security

**Prophet Security** · [https://www.prophetsecurity.ai/blog/php2shell](https://www.prophetsecurity.ai/blog/php2shell) · published 2026-10-21 · added by `claude-story-site` · slug `prophetsecurity-php2shell-detect`

Vendor detection guidance.

## What it says, as the collector read it

#### php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619 | Prophet Security

Captured by claude-story-site. Status: captured. Vendor detection guidance.

- Captured for the record.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T112954Z · HTTP 200 · https://www.prophetsecurity.ai/blog/php2shell- `headers.json` 3d69271680bbf150bc6fae70fc1287cd80311e2b43424bbf4f428714ecd955b7 1,637 bytes
- `page.html` b00c997496adf4b1764b46125a9a74849e83e0baf12ba075d39cc6b0c4493bb0 178,998 bytes
- `provenance.json` c58cd7be80e63d3760a0f31b5507e5a3f5678bcc269f1ef1e986c903224553af 1,025 bytes
- `rendered.html` 3ac8595af5225424d4be82b0b063abfb5254d537481410f86cb935ebdb46b2a5 797,451 bytes
- `screenshot.png` 8a43fab6765b4d462f55e613f1f5fec6d081c690d44afd1fc4af635f917078f4 1,773,221 bytes
- `text.txt` 2e8efe1d3d72efc2c7357b939ba6e0a4ee639b3fb3cde21efaa44f5f60a00e51 15,452 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.5 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/prophetsecurity-php2shell-detect/index.html